add dependency to spring-security-core